Lucene search
+L

7 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2026/06/17 12:00 a.m.23 views

HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory

org.hl7.fhir.utilities.XsltUtilities exposes two parallel families of XSLT transform helpers. The transform... overloads obtain their TransformerFactory from the project's hardened helper XMLUtil.newXXEProtectedTransformerFactory which sets ACCESSEXTERNALDTD="" and ACCESSEXTERNALSTYLESHEET="". Th...

9.1CVSS5.3AI score0.00569EPSS
SaveExploits1References3
Rows per page
Query Builder